Confidence in Chaos: Strategies for World-Class Security Operations

You've just found out the smart-lights in the cafeteria are connected to your corporate network and can be dimmed from anywhere in the world, the sales team has been spinning up unmanaged AWS accounts to do customer demos, and CISA says you need to put your Shields Up. You know you need to accelerate building your detection and response capabilities - and you can't risk making mistakes while you sort out your priorities. Today's cybersecurity operations centers (SOCs) are under more pressure than ever to adjust defense and detection techniques on-the-fly to address adversaries hiding in the corners of your IT. To help you accelerate, we've cultivated an actionable strategic roadmap for any size organization to up their security ops game. This is based on in-depth interviews with dozens of SOC teams in a broad range of environments, and decades of working in SOCs ourselves. Attendees will leave this presentation with practical, pragmatic action items to help their SOC to excel at these challenges.

For a free copy of the newly released 11 Strategies of a World-Class Cybersecurity Operations Center: https://www.mitre.org/news-insights/p...

ABOUT THE SPEAKERS
Ingrid Parker has worked in cybersecurity roles spanning from operational hands-on analysis through serving as a trusted advisor to CISO’s of large federal departments and agencies. She is currently the Manger of Intelligence at Red Canary. Prior to this position she held Chief Engineer, Manager, and individual contributor roles at MITRE with an emphasis on defensive operations including cybersecurity strategy, incident detection and response, cyber intelligence, and SOC maturation and evolution. Before joining MITRE Ingrid worked as a malware, forensic, and cyber threat intelligence analyst for Northrop Grumman and served in the U.S. Army as a systems administrator and network engineer. Ingrid has a B.F.A. in Graphic Design and a M.A. in Information Management. She is co-author of the book 11 Strategies of a World-Class Cybersecurity Operations Center.

Carson Zimmerman has been working in cybersecurity for 20 years. In his current role at Microsoft, Carson leads an investigations team responsible for defending the M365 platform and ecosystem. Previously at The MITRE Corporation, Carson specialized in cybersecurity operations center architecture, consulting, and engineering.
View upcoming Summits: http://www.sans.org/u/DuS
Download the presentation slides (SANS account required) at https://www.sans.org/u/1iaE